CVE-2023-52538

Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-52537

Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-52546

Vulnerability of package name verification being bypassed in the Calendar app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-52546

Vulnerability of package name verification being bypassed in the Calendar app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-52538

Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-52537

Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will affect availability...

PT-2024-14618 · Unknown · Calendar App

Name of the Vulnerable Software and Affected Versions: Calendar app affected versions not specified Description: The issue concerns a vulnerability where package name verification is bypassed in the Calendar app. Successful exploitation of this vulnerability may affect service confidentiality...

Malicious code in wlwz-2312-6605 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edaac4ef8cc8de76ccd90b434de63af605dce18e7aa283af92b6b73f5655cdb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-6000 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e024acc224ca049779bc8db7392150e2403925f65a9b53f3a97c9cd315feb157 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-4804 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7add5c93752f98ac650ba6e76035908ef22b7bc4b51c7503dd39a45fede694f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-1203 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84e04c90cf0ae007bb5d45d3c44555ed1238647d8616732ee294852cd57ae3e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-0303 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 705d91a85894b5321a7d9128ff74733712a8d096403735fcde8a4d843f95c28c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-2102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb9f06cd0f5e7d003affce389b5c92874514b3b2d1b48963ce4e237f3f9efb93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-5802 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6a15ea5e4a950592a22e94b2ab1ffc784b694d4ab29d24e81a858760e329749 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-dmall-friends (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a47185392e18cdda84f90b5448bb982832bf1a987d8b7d27af56587e509912c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Code injection

KernelSU is a Kernel-based root solution for Android devices. In versions 0.7.1 and prior, the logic of get apk path in KernelSU kernel module can be bypassed, which causes any malicious apk named me.weishu.kernelsu get root permission. If a KernelSU module installed device try to install any not...

CVE-2023-49794

KernelSU (Kernel-based root solution for Android) versions ≤ 0.7.1 contain a bypass in the kernel module’s apk-path logic. This allows a malicious apk named me.weishu.kernelsu, or one with a package name matching the official KernelSU Manager, to obtain root privileges on the device. Exploitation...

CVE-2023-6839

Due to improper error handling, a REST API resource could expose a server side error containing an internal WSO2 specific package name in the HTTP response...

CVE-2023-6839

Due to improper error handling, a REST API resource could expose a server side error containing an internal WSO2 specific package name in the HTTP response...

CVE-2023-6839

CVE-2023-6839 affects WSO2 API Manager. The issue stems from improper error handling in a REST API resource, which can cause server-side errors to disclose an internal WSO2-specific package name in the HTTP response. Documented impacts indicate confidentiality exposure (information disclosed via ...